This chapter includes the following sections: • Multimedia Conference Manager Overview, page 289 • H.323 Gatekeeper Features, page 290 • H.323 Proxy Features, page 297 • H.323 Prerequisite Tasks and Restrictions, page 302 • H.323 Gatekeeper Configuration Task List, page 303 • H.323 Gatekeeper Configuration Examples, page 345 For a complete description of the H.323 gatekeeper commands used in this chapter, refer to the Cisco IOS Voice, Video, and Fax Command Reference. To locate documentation for other commands that appear in this chapter, use the command reference master index or search online. For more information regarding Resource Reservation Protocol (RSVP), synchronous reservation timers, and slow connect, refer to the Cisco IOS Release 12.1(5)T VoIP Call Admission Control Using RSVP or the Cisco IOS Quality of Service Solutions Configuration Guide. To identify the hardware platform or software image information associated with a feature in this chapter, use the Feature Navigator on Cisco.com to search for information about the feature or refer to the software release notes for a specific release. For more information, see the “Identifying Supported Platforms” section in the “Using Cisco IOS Software” chapter. Multimedia Conference Manager Overview Deploying H.323 applications and services requires careful design and planning for the network infrastructure and for the H.323 devices. The Cisco H.323-compliant Multimedia Conference Manager provides gatekeeper and proxy capabilities, which are required for service provisioning and management of H.323 networks. With the Cisco Multimedia Conference Manager, your current internetwork can be configured to route bit-intensive data, such as audio, telephony, video and audio telephony, and data conferencing using existing telephone and ISDN links without degrading the current level of service of the network. In addition, H.323-compliant applications can be implemented on existing networks in an incremental fashion without upgrades. Cisco IOS Voice, Video, and Fax Configuration Guide VC-289 Configuring H.323 Gatekeepers and Proxies H.323 Gatekeeper Features Multimedia Conference Manager provides a rich list of networking capabilities, including the following: • A means to implement quality of service (QoS), which is required for the successful deployment of H.323 applications. • Interzone routing in the E.164 address space. When using H.323-identification (H.323-ID) format addresses, interzone routing is accomplished by using domain names. Multimedia Conference Manager allows you to do the following: • Identify H.323 traffic and apply appropriate policies. • Limit H.323 traffic on the LAN and WAN. • Provide user accounting for records based on service use. • Insert QoS for the H.323 traffic generated by applications such as Voice over IP (VoIP), data conferencing, and video conferencing. • Implement security for H.323 communications. Principal Multimedia Conference Manager Functions The H.323-compliant Multimedia Conference Manager has two principal functions: gatekeeper and proxy. Gatekeeper subsystems provide the following features: • User authorization in which authentication, authorization, and accounting (AAA) account holders are permitted to register and use the services of the gatekeeper application. • Accounting using AAA call detail records. • Zone bandwidth management to limit the number of active sessions. • H.323 call routing. • Address resolution. Cisco Multimedia Conference Managers can be configured to use the Cisco Hot Standby Router Protocol (HSRP) so that when one gatekeeper fails, the standby gatekeeper assumes its role. Proxy subsystems provide the following features: • H.323 traffic consolidation. • Tight bandwidth controls. • QoS mechanisms such as IP Precedence and RSVP. • Secure communication over extranets. H.323 Gatekeeper Features The following sections describe the main features of a gatekeeper in an H.323 network: • Zone and Subnet Configuration, page 291 • Redundant H.323 Zone Support, page 291 • Gatekeeper-to-Gatekeeper Redundancy and Load-Sharing Mechanism, page 292 • Interzone Communication, page 293 • RADIUS and TACACS+, page 293 • Accounting via RADIUS and TACACS+, page 293 VC-290 Cisco IOS Voice, Video, and Fax Configuration Guide Configuring H.323 Gatekeepers and Proxies H.323 Gatekeeper Features • Interzone Routing Using E.164 Addresses, page 294 • HSRP Support, page 296 Zone and Subnet Configuration A zone is defined as the set of H.323 nodes controlled by a single gatekeeper. Gatekeepers that coexist on a network may be configured so that they register endpoints from different subnets. Endpoints attempt to discover a gatekeeper and consequently the zone of which they are members by using the Registration, Admission, and Status (RAS) message protocol. The protocol supports a discovery message that may be sent multicast or unicast. If the message is sent multicast, the endpoint registers nondeterministically with the first ga...